Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File:                     1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier:          s4v+qlVNIXp+vRQ4VokcNyP6chnwY2me+C/MjAEAu2U=
Subject key identifier:   F8:45:BD:B2:A8:84:25:8A:46:56:7B:3F:BA:2F:D2:5A:9F:39:70:EA
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer:       /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial:       019CA9EB25317F9AD430C6620887695140F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 15:01:25 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:25 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:25 +0000
Files and hashes:         1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: QaW/ZWSb3w7ZkhSIhyoBIUpdylV0KzDVhK+bhyQ2FFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:eb:25:31:7f:9a:d4:30:c6:62:08:87:69:51:40:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
        Validity
            Not Before: Mar  1 15:01:25 2026 GMT
            Not After : Mar  2 15:01:25 2026 GMT
        Subject: CN=f845bdb2a884258a46567b3fba2fd25a9f3970ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a1:4e:31:cb:48:35:37:f1:90:f4:de:3e:f4:
                    fe:ea:ed:f3:d8:63:8b:91:fe:9d:0a:32:21:46:5a:
                    6c:15:7f:ca:d3:b9:2b:d6:e8:22:e7:ad:ee:cd:27:
                    82:b9:54:74:12:aa:ee:a4:e1:d4:49:ac:50:34:bd:
                    07:be:c9:e2:6f:61:c0:33:7e:e3:c4:c9:06:bd:0d:
                    dd:b6:96:76:7b:11:e9:62:24:6a:06:aa:11:ad:04:
                    de:2f:05:38:f1:08:9a:dc:bf:04:9c:92:e6:a0:35:
                    7f:60:07:53:81:4e:a0:eb:c2:e8:c6:93:36:2e:32:
                    fb:d3:03:a6:22:06:65:a0:1f:5f:e8:f9:7c:e8:9a:
                    b1:05:22:df:41:5b:e7:58:c8:1a:11:44:8c:19:01:
                    fe:c8:42:0d:07:da:63:40:0d:51:ba:f5:ba:e2:17:
                    c6:fc:29:6e:37:56:88:fb:e1:c3:f0:3f:18:a6:5a:
                    7a:aa:11:fe:22:17:da:5c:46:b1:a8:43:0f:58:43:
                    32:f3:12:c0:0f:dc:0c:04:1e:02:7e:c4:18:84:d8:
                    f5:bb:be:7c:fe:4b:4d:5a:ea:67:de:1d:dd:58:68:
                    ec:2a:09:36:95:28:81:b3:c6:b7:69:c1:cc:1c:86:
                    22:a8:c8:64:a9:eb:45:e9:9c:60:91:d7:1f:68:44:
                    72:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:45:BD:B2:A8:84:25:8A:46:56:7B:3F:BA:2F:D2:5A:9F:39:70:EA
            X509v3 Authority Key Identifier:
                keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:78:49:2a:5f:48:39:c7:d1:a6:82:44:ee:af:8d:dd:a6:6d:
         b7:43:62:73:c7:a1:c5:12:6c:df:6a:c0:74:d0:69:09:1d:a4:
         55:f3:2b:82:fc:cc:29:51:ff:1a:21:f3:36:2b:67:30:ff:e6:
         65:bc:6b:79:17:07:d8:f4:88:8d:49:3c:d5:b5:8c:f9:70:98:
         9a:53:9a:b4:a6:6b:a9:4d:1b:13:70:49:14:f3:11:67:9a:f7:
         ed:39:23:84:db:0c:99:72:d0:df:0b:c2:71:51:31:b1:7e:06:
         a6:7a:00:2c:07:cb:b6:ae:12:5e:49:3c:e8:3c:43:6f:9a:b3:
         a7:7b:06:1d:de:28:34:74:c5:bb:56:63:1b:2c:eb:76:e4:3d:
         92:7b:ce:88:60:15:4e:de:62:89:0f:1b:9c:9b:02:91:d8:6c:
         a9:00:55:f7:93:29:a9:de:d7:c4:a1:d9:27:dc:ed:34:f3:e4:
         68:8c:90:b8:80:3e:f9:05:59:bf:6e:44:92:f2:7d:91:19:54:
         8c:2d:39:e0:b5:f8:da:94:ab:1c:a3:8d:40:06:e3:c0:a0:fa:
         f4:8d:48:5d:0f:96:8f:9f:08:de:04:fa:4f:c9:95:da:81:b1:
         38:ee:db:d9:3b:24:4e:49:19:ab:f4:71:1b:3c:07:6c:e8:76:
         9e:0c:f1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:43 2026 by rpki-client